FPolicy is an ONTAP feature that enables this functionality. FPolicy is a file access notification framework that allows external applications to monitor and control file access on ONTAP storage systems1. FPolicy can be used to protect files from ransomware by integrating with third-party solutions that use user behavioral analytics (UBA) to detect abnormal activity andtrigger actions such as creating a Snapshot copy and blocking the AD user access23. FPolicy can also be activated with a single click from BlueXP or ONTAP System Manager to protect against common ransomware extensions4. References = 1: FPolicy overview - NetApp, 2: Prevent ransomware spread with ONTAP automatic ransomware protection, 3: Fighting Ransomware, Part Six: Remediation, 4: Proactive ransomware protection—automated with ONTAP - NetApp.